Re: Which takes priority, ipv4, or ipv6?

2023-03-27 Thread Jeremy Ardley
On 27/3/23 19:48, Richmond wrote: So how is the preference determined? It seems to be determined by the DNS, but why or how do I tell for example with host -v? When you as a DNS about a hostname it can return an A record and/or an record. The A record is IPv4 and the record is I

Re: Question for this IP's PTR

2023-03-24 Thread Jeremy Ardley
On 25/3/23 08:32, Greg Wooledge wrote: I didn't know .one was a valid TLD. It looks like .two is not, so if someone were to assign "two.two.two.two" as the PTR value of an IP address, that PTR would not resolve back to any IP address. (An IP address block owner might reject such a petition.)

Re: what's the right way to resolve localhost's IPs

2023-03-23 Thread Jeremy Ardley
On 23/3/23 15:42, Nicolas George wrote: Jeremy Ardley (12023-03-23): On your second topic I don't usually run firewalls on my cloud severs. But surely on a server the network configuration is static, including the firewall rules, isn't it? On AWS the firewall rules are set by AWS

Re: what's the right way to resolve localhost's IPs

2023-03-22 Thread Jeremy Ardley
On 23/3/23 07:33, Greg Wooledge wrote: On Thu, Mar 23, 2023 at 07:06:55AM +0800, Jeremy Ardley wrote: I am the guilty party who had docker. I have not raised any issue about it. The instance is not used any more and was an experiment in running nextcloud on an arm server Then perhaps you

Re: what's the right way to resolve localhost's IPs

2023-03-22 Thread Jeremy Ardley
On 23/3/23 05:47, Greg Wooledge wrote: On Wed, Mar 22, 2023 at 09:16:48PM +, Tom Furie wrote: Or... ip -o a | awk '{print $2, $4}' I think they wanted to restrict it to IPv4 (inet) addresses, and omit the netmask (/8 or whatever CIDR suffix), so: ip -o a | awk -F '[ /]*' '$3 == "inet" {

AI Speech Synthesis

2023-03-21 Thread jeremy ardley
Is there any open source AI speech synthesis package that can be run on a Debian workstation or server? That is a package that has a large modern set of training data and that can be used to 'clone' a new voice from a relatively small sample. Secondarily that it has a workable near real time t

Re: what's the right way to resolve localhost's IPs

2023-03-21 Thread Jeremy Ardley
On 22/3/23 09:12, f...@dnsbed.com wrote: Hello, In my shell script, how to get the localhost's IPs (eth0 and eth1) correctly? I know I can run 'ifconfig' and grep etc, but it's maybe not that graceful. On Debian the preferred  command is root@debian12:~# ip a 1: lo: mtu 65536 qdisc noqueu

Re: question about net address

2023-03-21 Thread Jeremy Ardley
On 22/3/23 06:27, Stefan Monnier wrote: Interesting. I can't remember ever seeing 192.168.1.1/32 used. In my my part of the world, it's only meaningful as a degenerate form: all the syntaxes I've seen which accept the IP/NN notation also accept just IP to mean IP/32, so writing IP/32 is just

Re: Memory use (was: good freedom-respecting computer for running Debian)

2023-03-20 Thread Jeremy Ardley
On 21/3/23 10:20, Jeremy Ardley wrote: On a tangent, I've just set up a Debian 11 Linode LEMP server with 1GB RAM and 10GB Disk. It's not in the least troubled by the limited memory. Also there is no swap in the default image - which seem sensible as it's on a SSD and you d

Re: Memory use (was: good freedom-respecting computer for running Debian)

2023-03-20 Thread Jeremy Ardley
On 21/3/23 10:02, Stefan Monnier wrote: So, maybe there's a "good" reason why Apple still configures their cheapest laptop with only 8GB of RAM: for "normal" work it's still perfectly sufficient, despite all the best efforts of web site designers out there. [ But I would recommend against buyi

Re: debian server with two public IPs

2023-03-20 Thread Jeremy Ardley
On 20/3/23 17:21, to...@tuxteam.de wrote: I get the impression the problem is to send return traffic back out on the interface it came in on. If this is it, then rp_filter, as I proposed elsewhere in this thread, seems like exactly made for this. I'm afraid poking kernel parameters is beyond

Re: debian server with two public IPs

2023-03-20 Thread Jeremy Ardley
On 20/3/23 16:39, Stanislav Vlasov wrote: пн, 20 мар. 2023 г. в 12:33, : I have a networking question that I can't understand for. I have the Debian 11 host with two ethernet cards. There is public IP and gateway for each ethernet card. (they are public IPs from two different net address bloc

Re: question about net address

2023-03-19 Thread Jeremy Ardley
On 20/3/23 02:48, David Wright wrote: O Checking the RFC. To my reading the final stanza is not checked " The is compared to the given network. If CIDR prefix length high-order bits match, the mechanism matches." https://datatracker.ietf.org/doc/html/rfc7208#section-5.6 So in this case

Re: question about net address

2023-03-19 Thread Jeremy Ardley
On 19/3/23 19:29, Jeremy Ardley wrote: In this case of the /24 it gave an answer I expected. I imagine it will take a trawl of the RFC and then of actual implementations to find out for sure. The best description of the AI is it is informative but not authorative. Checking the RFC. To

Re: question about net address

2023-03-19 Thread Jeremy Ardley
On 19/3/23 19:10, to...@tuxteam.de wrote: [...] Yes, it is just a simulation of knowledge (it can be pretty convincing at that,though). In other words: if you want an answer from it, you have to know the answer beforehand. I have actually paid for a subscription and have used it for a month n

Re: question about net address

2023-03-19 Thread jeremy ardley
On 19/3/23 18:38, cor...@free.fr wrote: So, * 188.66.63.1/24 is a range, not a single host in SPF * why it's not written as 188.66.63.0/24 which is more clear? In the very specific case of an SPF there will be a rule. I assume given the AI response that the rule is to use the net definiti

Re: question about net address

2023-03-19 Thread Jeremy Ardley
On 19/3/23 18:28, cor...@free.fr wrote: "v=spf1 ip4:188.66.63.1/24 -all" According to an AI version 4 that cannot be named: This is an SPF (Sender Policy Framework) record, which is a TXT record in a domain's DNS settings. SPF records are used to help prevent email spoofing by specifying w

Re: auto restarting in crontab

2023-03-15 Thread Jeremy Ardley
On 16/3/23 12:09, p...@ymail.ne.jp wrote: Just for fun, I asked this question on ChatGPT, who gives the answers as follows. Q:  Please help generate a systemd configuration for Debian linux A: Sure, here's an example of a systemd configuration file for a Debian Linux service: Be very care

Re: Debian 12 IPv6 client?

2023-03-14 Thread Jeremy Ardley
On 15/3/23 01:53, David Wright wrote: I had hoped (not very hopefully) the solution wouldn't involve bashing kernel parameters. From previous journeys in this area systemd-networkd does a much neater job and has huge numbers of options. This is my worstation config I hope it gets better :

Re: Debian 12 IPv6 client?

2023-03-14 Thread jeremy ardley
On 14/3/23 16:21, Tim Woodall wrote: On Tue, 14 Mar 2023, Jeremy Ardley wrote: I conclude there is no IPv6 DHCP involved but there must be something that listens to RA announcements and generates a MAC derived address from that. I still need to know how to control that as there are options

Re: Debian 12 IPv6 client?

2023-03-14 Thread Jeremy Ardley
On 14/3/23 13:15, David Wright wrote: cat /etc.network/interfaces # This file describes the network interfaces available on your system # and how to activate them. For more information, see interfaces(5). source /etc/network/interfaces.d/* # The loopback network interface auto lo iface lo i

Re: Debian 12 IPv6 client?

2023-03-13 Thread Jeremy Ardley
On 14/3/23 12:29, jeremy ardley wrote: I am testing the alpha 2 release of Debian 12 (I'm quite annoyed they have done away with /var/log/syslog) My system is "pure" debian 12 and was net installed a few minutes before my checks. Nothing was changed from the original instal

Debian 12 IPv6 client?

2023-03-13 Thread jeremy ardley
I am testing the alpha 2 release of Debian 12 (I'm quite annoyed they have done away with /var/log/syslog) My system is "pure" debian 12 and was net installed a few minutes before my checks. Nothing was changed from the original install. My problem today is identifying what bit of the system i

Re: real debian or true debian?

2023-03-13 Thread Jeremy Ardley
On 14/3/23 07:55, rhkra...@gmail.com wrote: On Sunday, March 12, 2023 09:02:26 PM cor...@free.fr wrote: When such a debian (the digital product) is authentic, should we say it "real debian" or "true debian"? I am not sure about this statement. My guess is that Corey is a French speaker, and

Re: [SOLVED?] Re: BIND: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out

2023-03-13 Thread Jeremy Ardley
On 14/3/23 07:23, Greg Wooledge wrote: I have not to this day figured out what "vendor preset" means here. Mine shows the same as yours -- "disabled; vendor preset: enabled". All I care about is the part that says "disabled". That's the actual state. You may be happy to learn you can't ev

Re: [SOLVED?] Re: BIND: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out

2023-03-13 Thread Jeremy Ardley
On 14/3/23 06:34, Greg Wooledge wrote: On Tue, Mar 14, 2023 at 06:23:09AM +0800, Jeremy Ardley wrote: FYI systed-resolved is the inbuilt debian caching DNS server which may be enabled by default. It is NOT enabled by default. unicorn:~$ systemctl status systemd-resolved ● systemd

Re: [SOLVED?] Re: BIND: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out

2023-03-13 Thread Jeremy Ardley
On 14/3/23 06:34, Greg Wooledge wrote: On Tue, Mar 14, 2023 at 06:23:09AM +0800, Jeremy Ardley wrote: FYI systed-resolved is the inbuilt debian caching DNS server which may be enabled by default. It is NOT enabled by default. It is if you are using NetworkManager -- Jeremy (Lists)

Re: [SOLVED?] Re: BIND: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out

2023-03-13 Thread Jeremy Ardley
On 14/3/23 06:23, Jeremy Ardley wrote: I had a signed DNS error in a similar configuration using a bind authoritive and caching server. It turned out it was systemd-resolved interfering and/or replacing part of the DNS chain FYI systed-resolved is the inbuilt debian caching DNS server

Re: [SOLVED?] Re: BIND: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out

2023-03-13 Thread Jeremy Ardley
On 14/3/23 06:14, local10 wrote: Strangely, the issue resolved itself without me having to do anything. Am really puzzled as to what it was. Perhaps the internet provider suddenly started to block DNS queries but then allowed them again? If so, why did dig's message say that there was "comm

Re: BIND: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out

2023-03-13 Thread Jeremy Ardley
On 13/3/23 17:12, local10 wrote: "debug 1;" doesn't seem to be a valid option, couldn't start BIND with it.  Anyhow, the following is what I get when running "dig www.yahoo.com" Mar 13 05:03:11 tst systemd[1]: Started named.service - BIND Domain Name Server. Mar 13 05:03:11 tst named[52836]:

Re: BIND: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out

2023-03-13 Thread Jeremy Ardley
On 13/3/23 16:19, local10 wrote: Mar 13, 2023, 07:25 by jer...@ardley.org: Try netstat -tulpnW | grep 53 and see what's listening Bind seems to be listening on 127.0.0.1 port 53. I don't have netstat installed and can't easily install it as aptitude can't resolve Debian server's name to

Re: BIND: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out

2023-03-13 Thread Jeremy Ardley
On 13/3/23 16:19, local10 wrote: Bind seems to be listening on 127.0.0.1 port 53. I don't have netstat installed and can't easily install it as aptitude can't resolve Debian server's name to an IP, so the following is what I tried: # telnet -4 127.0.0.1 53 Trying 127.0.0.1... Connected to 1

Re: BIND: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out

2023-03-13 Thread Jeremy Ardley
On 13/3/23 14:34, local10 wrote: Mar 13, 2023, 06:19 by jer...@ardley.org: The contents of /etc/resolv.conf are always of interest. There's really not much there: # cat /etc/resolv.conf nameserver 127.0.0.1 That and /etc/nsswitch.conf a/etc/hosts # cat /etc/nsswitch.conf # /etc/nssw

Re: BIND: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out

2023-03-12 Thread Jeremy Ardley
On 13/3/23 14:08, local10 wrote: Hi, I have  a local caching DNS server that was working fine for a long time but today, all of a sudden, it stopped resolving queries. More info: https://pastebin.com/iW5YeXgS Any ideas? Thanks The contents of /etc/resolv.conf are always of interest. That

Re: home server for email box

2023-03-12 Thread Jeremy Ardley
On 13/3/23 06:39, Vincent Lefevre wrote: O Each of those options has  been chosen by the mail list administrator. As a general principal it's a good thing to know the system sending you mail is genuine. Given the variety, there is no point in rejecting the email if there is no certificate, bu

Re: PDF on debian

2023-03-12 Thread Jeremy Ardley
On 13/3/23 08:13, Brian wrote: The processing chain in cups generated a raster bitmap image for me to format and deliver to the printer. I didn't dig deep but I suspect the previous stages involved postscript before raster conversion rather than directly from a pdf stage. Suspicions don't qu

Re: home server for email box

2023-03-12 Thread Jeremy Ardley
On 13/3/23 05:52, Vincent Lefevre wrote: Yes, but here, that's optional. So I'm wondering whether you really miss anything. Note also that a client certificate may be sent only if it is requested by the server, and if client certificates are requested, then there are issues with some clients:

Re: PDF on debian

2023-03-12 Thread Jeremy Ardley
On 13/3/23 03:38, Stefan Monnier wrote: Nowadays PDF is what matters: it's the standard format for driverless printing (along with a mix of JPEG, PWG raster, or PCLm depending on which driverless printing standard you're talking about). Admittedly, standards like IPP Everywhere require suppor

Re: bendel.debian.org untrusted certificate

2023-03-11 Thread jeremy ardley
On 12/3/23 12:50, Jeremy Ardley wrote: Received: from edge.bronzemail.com (2403-5800-c000-1b7-f3d4-d970-ca28-bf4f.ip6.aussiebb.net [IPv6:2403:5800:c000:1b7:f3d4:d970:ca28:bf4f]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature

Re: bendel.debian.org untrusted certificate

2023-03-11 Thread Jeremy Ardley
On 12/3/23 12:29, Jeremy Ardley wrote: On 12/3/23 08:48, jeremy ardley wrote: Received: from edge.bronzemail.com (2403-5800-c000-1b7-f3d4-d970-ca28-bf4f.ip6.aussiebb.net [IPv6:2403:5800:c000:1b7:f3d4:d970:ca28:bf4f]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits

Re: bendel.debian.org untrusted certificate

2023-03-11 Thread Jeremy Ardley
On 12/3/23 08:48, jeremy ardley wrote: Received: from edge.bronzemail.com (2403-5800-c000-1b7-f3d4-d970-ca28-bf4f.ip6.aussiebb.net [IPv6:2403:5800:c000:1b7:f3d4:d970:ca28:bf4f]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature

Re: SIP servers.

2023-03-11 Thread Jeremy Ardley
On 12/3/23 07:55, pe...@easthope.ca wrote: Hi, Appears that repro remains unavailable. https://wiki.debian.org/FreedomBox/Manual/Repro Also ekiga is gone. What are the current recommendations for SIP servers? Thx, ... P. If all you want is SIP registration and routing

bendel.debian.org untrusted certificate

2023-03-11 Thread jeremy ardley
Examining incoming connections I see that google is trusted but bendel.debian.org (this list) is not Mar 12 08:37:39 egde postfix/25pass/smtpd[78299]: setting up TLS connection from bendel.debian.org[82.195.75.100] Mar 12 08:37:39 egde postfix/25pass/smtpd[78299]: Untrusted TLS connection esta

Re: debian for DNS servers

2023-03-11 Thread Jeremy Ardley
On 11/3/23 17:56, cor...@free.fr wrote: Now I have three debian nodes in different DCs. Can I deploy a distributed DNS service for fault tolerance? Assuming you don't mean a Windows DC, you can use bind (bind9) in an architecture that has a master for a DNS zone and multiple slaves. Change

Re: home server for email box

2023-03-10 Thread Jeremy Ardley
On 11/3/23 06:09, Michel Verdier wrote: Le 10 mars 2023 Jeremy Ardley a écrit : smtpd_recipient_restrictions =    permit_sasl_authenticated    permit_mynetworks    reject_unauth_destination    reject_invalid_hostname    reject_non_fqdn_hostname    reject_non_fqdn_sender

Re: home server for email box

2023-03-10 Thread Jeremy Ardley
On 11/3/23 05:27, Michel Verdier wrote: Le 10 mars 2023 Jeremy Ardley a écrit : You may run into problems if your IP address is in a range that is blacklisted due to some addresses being used to spam. I'm not sure if IPv6 ranges have got into that category as yet. spamhaus has a ipv6

Re: home server for email box

2023-03-10 Thread Jeremy Ardley
On 11/3/23 05:04, Jeremy Ardley wrote: All you need to do is generate an SPF record authorising your fixed IP(s) to send mail for your domain(s). You don't need need to have control over the forward and reverse DNS of the IPs, but it is pretty much required that your ISP has forward

Re: home server for email box

2023-03-10 Thread Jeremy Ardley
On 10/3/23 23:52, Henning Follmann wrote: Well "could" is the best way to describe the chances of this working. I think the best way too find out: Check if the ISP will allow you to set the reverse DNS record matching your chose A record. If they do, GREAT! If they don't, you most likely will

Re: home server for email box

2023-03-10 Thread Jeremy Ardley
On 10/3/23 18:29, p...@ymail.ne.jp wrote: Hello, I have a home server with static IP from the ISP. The server has debian 11 installed. Can I setup a mail server (postfix, dovecot, dkim, rspamd etc) on this box to receive/send email normally? Or do you guys have this similar operation?

Re: what method do you prefer for data transfer between nodes?

2023-03-05 Thread Jeremy Ardley
On 5/3/23 16:22, Ken Young wrote: Hello, The methods I know, 1. scp pros: the native tool in the OS cons: you will either input password or put key pairs into servers for authentication. 2. rsync pros: it can transfer data by increasement cons: you need to setup rsyncd server and make the

slapd access to private key owned by root

2023-03-04 Thread jeremy ardley
I think the problem is probably unsolvable but I thought I'd ask. I understand slapd starts as user root and reads config etc and then changes to user openldap This means that it could potentially read a private key owned by root during startup? The problem is when I try and configure priva

Re: does your Thunderbird for deb11 often become unresponsive?

2023-03-02 Thread Jeremy Ardley
On 3/3/23 12:02, hlyg wrote: at first i suspect Thunderbird(TB) try to access some sites that are blocked in china i disable show Start Page when it launches i disable check email automatically for each account but it becomes unresponsive when i File->New->Message i really don't know cause o

Re: ssh bug known_hosts?

2023-03-01 Thread Jeremy Ardley
On 2/3/23 05:51, Greg Wooledge wrote: On Wed, Mar 01, 2023 at 02:43:38PM -0700, Charles Curley wrote: On Thu, 2 Mar 2023 03:48:49 +0800 jeremy ardley wrote: 2. The known hosts file used is /etc/ssh/known_hosts rather that ~/.ssh/known_hosts - which causes a permissions error I am not

Re: ssh bug known_hosts?

2023-03-01 Thread jeremy ardley
On 2/3/23 05:52, Jeffrey Walton wrote: On Wed, Mar 1, 2023 at 2:49 PM jeremy ardley wrote: I may have found a bug in openssh. [...] I have created a ~/.ssh/config file with contents Host jeremy_client HostName client.example.com User jeremy IdentityFile ~/.ssh

ssh bug known_hosts?

2023-03-01 Thread jeremy ardley
I may have found a bug in openssh. I raise it here as the ssh mailing list is actually a newsgroup that no-one seems to use. I can ssh jer...@client.example.com without the issue I have created a ~/.ssh/config file with contents Host jeremy_client     HostName client.example.com     User jer

stop mate weather app spamming syslog?

2023-02-25 Thread jeremy ardley
My syslog gets a couple of dozen line like below every 10 mins or so. Any way to stop it? Or get syslog to send it to /dev/null ? Feb 26 06:50:22 client org.mate.panel.applet.MateWeatherAppletFactory[3517]: Forecast for Monday 27 February Feb 26 06:50:22 client org.mate.panel.applet.MateWeath

Re: Debugging what is deleting/recreating /etc/resolv.conf with wrong configuration, on debian stable

2023-02-23 Thread Jeremy Ardley
On 23/2/23 18:23, daven...@tuxfamily.org wrote: Hello, On 2023-02-23 02:59, cono...@panix.com wrote: On 2/22/23, daven...@tuxfamily.org wrote: There is an unidentified process that decides it's ok to delete and recreate /etc/resolv.conf without asking user/admin, The problem is, the problema

build static linked gedit with meson?

2023-02-17 Thread jeremy ardley
I want to compile a statically linked version of gedit using the upstream meson based package. I've got the sources matching my current Debian 11 system and can do a build no problem. What I want to do is statically link the gedit executable. I see the non-static executable is very small and

Re: Partitioning an SSD?

2023-02-15 Thread jeremy ardley
On 16/2/23 07:45, Michael Stone wrote: I don't personally think there's a point in partitioning any storage device on a user system these days beyond what's required to boot. If you want to do more, that's a personal preference. Being an SSD doesn't really change things. I agree with th

Re: ipv6 maybe has arrived.

2023-02-10 Thread jeremy ardley
On 10/2/23 19:03, gene heskett wrote: Chuckle, guilty Tomas, but NM has now been muffled and no longer yells at you via the logs when it find's a chattr +i denying its ability to impregnate the lassie. I personally eradicate NM and use either systemd-networkd on debian, or networking serv

Re: ipv6 maybe has arrived.

2023-02-09 Thread jeremy ardley
On 10/2/23 05:32, Michel Verdier wrote: Le 9 février 2023 gene heskett a écrit : And where is that info published? Up till now I was not aware of an ipv6 equ to 192.168.xx.xx addresses. That could make the cheese quite a bit less binding. :o)> You could find a nice list here: https://www.ap

Re: ipv6 maybe has arrived.

2023-02-09 Thread jeremy ardley
On 9/2/23 17:13, Anssi Saari wrote: If forwarding is not enabled, then the LAN IPv6 hosts are just as isolated from incoming traffic from the internet as hosts behind NAT. If you don't have IPv6 forwarding on the router then none of your internal hosts will be able to communicate on IPv6 beyo

Re: ipv6 maybe has arrived.

2023-02-08 Thread jeremy ardley
On 9/2/23 06:39, gene heskett wrote: On 2/8/23 16:29, jeremy ardley wrote: On 9/2/23 04:54, gene heskett wrote: My several machine home net is behind a dd-wrt install, NAT'ed so that any machine here has access to the net via the ipv4 address my router obtains from them. That legal

Re: ipv6 maybe has arrived.

2023-02-08 Thread jeremy ardley
On 9/2/23 04:54, gene heskett wrote: My several machine home net is behind a dd-wrt install, NAT'ed so that any machine here has access to the net via the ipv4 address my router obtains from them. That legally is a dynamic address but hasn't changed in the decade and a half since I last sw

Re: OT: repair/replace cell in Li-ion battery?

2023-02-06 Thread jeremy ardley
On 6/2/23 23:45, Roy J. Tellason, Sr. wrote: On Sunday 05 February 2023 06:29:12 pm local10 wrote: 5 Feb 2023, 20:28 byy...@masson-informatique.fr: Does anybody knows trusted manufacturers / brands I could find on the Internet? I am really disappointed by this battery (brand "vhbw") partially

AppImage error kdevelop

2023-01-27 Thread jeremy ardley
I'm having trouble with kdevelop (and getting zero support from the kdevelop list) I installed the latest Debian version using apt, but the problem is when I go to open an existing project all project files are grayed out in the file browser. Unable to resolve this I downloaded the latest AppI

Re: Unexpected permission denied

2023-01-24 Thread jeremy ardley
On 25/1/23 15:44, jeremy ardley wrote: On 25/1/23 15:33, to...@tuxteam.de wrote: On Wed, Jan 25, 2023 at 02:51:05PM +0800, jeremy ardley wrote: [...]   0.41 lstat("/var/www/grammartiste.com/web/vendor/autoload.php", 0x7fffdc580970) = -1 EACCES (Permission denied)

Re: Unexpected permission denied

2023-01-24 Thread jeremy ardley
On 25/1/23 15:33, to...@tuxteam.de wrote: On Wed, Jan 25, 2023 at 02:51:05PM +0800, jeremy ardley wrote: [...] 0.41 lstat("/var/www/grammartiste.com/web/vendor/autoload.php", 0x7fffdc580970) = -1 EACCES (Permission denied) 0.34 lstat("/var/www/grammartiste

Unexpected permission denied

2023-01-24 Thread jeremy ardley
I am having trouble with php8.1-fpm commanded from nginx on a bullseye system php8.1-fpm reports access denied when opening a specific file for the application. The file has universal rwx permissions (after attempting to fix problem). I am not running selinux but I do see some references to a

Re: Installation of Salome 9.9.0

2023-01-14 Thread jeremy ardley
On 15/1/23 07:46, Gary L. Roach wrote: The lack of information is because I never got off the ground with this. I did finally figured out how to get ./sat to work and completely cleaned up all of the missing pieces. But then I am a loss of what to do next. My top Salome directory looks like

Re: Limiting ssh access: by MAC Address?

2023-01-04 Thread jeremy ardley
On 5/1/23 12:56, Jeffrey Walton wrote: On Wed, Jan 4, 2023 at 11:34 PM Gareth Evans wrote: On 3 Jan 2023, at 22:07, Tom Browder wrote: I ... would like to access my home server from my laptop ... On 5 Jan 2023, at 04:13, Jeffrey Walton wrote: ... Avoiding the key exchange is a big win s

Re: questions on iptables

2022-12-24 Thread jeremy ardley
On 25/12/22 10:14, Piperみかこ wrote: Hello, I have setup the following iptables on linux server, sudo /usr/sbin/iptables -F sudo /usr/sbin/iptables -A INPUT -s 127.0.0.1 -j ACCEPT sudo /usr/sbin/iptables -A INPUT -s xx.xx.xx.xx -j ACCEPT  # my server public IP sudo /usr/sbin/iptables -A INPUT

sleep on a low-usage NAS ?

2022-12-12 Thread jeremy ardley
I have just converted a qnap TS-212 NAS from the vendor software to a stock Debian 10. (Armel) I notice immediately that the NAS never spins down its disks when idle - as it used to with the vendor software. The NAS is used maybe once per day to take backups via smb. Ideally, I'd like it to

Re: Detailed Leafpad manual [not just manpage]?

2022-12-04 Thread jeremy ardley
On 4/12/22 20:56, Andrew M.A. Cater wrote: On Sun, Dec 04, 2022 at 05:29:58AM -0600, Richard Owlett wrote: I wish to document a personal project.The desired format will resemble the outline for term papers we wrote in school in the 50's. Except some items may be a short paragraph or two long.

SysVinit vs SystemD

2022-11-21 Thread jeremy ardley
Timely video on the unix/linux startup processes applicable to versions of Debian. https://www.youtube.com/watch?v=Fz8Ldw-s8_Q -- Jeremy

Re: how to add more ipv6 addresses to an interface that is being configured through dhcpv6

2022-11-14 Thread jeremy ardley
On 14/11/22 22:34, hw wrote: [...] However, systemd-networkd works as well (and better) with an easier configuration. Hm, then why isn't it the default, and what's network manager for? NetworkManager seems to be a RedHat baby and has some effort put into a GUI. systemd-networkd has not go

Re: how to add more ipv6 addresses to an interface that is being configured through dhcpv6

2022-11-14 Thread jeremy ardley
On 15/11/22 00:22, Curt wrote: On 2022-11-14, jeremy ardley wrote: Network Manager is terrible. Some of the instructions include you having to reboot your system to make chages take. What "instructions" would those be, and of what provenance, that require a system reboot rat

Re: how to add more ipv6 addresses to an interface that is being configured through dhcpv6

2022-11-14 Thread jeremy ardley
On 14/11/22 19:14, hw wrote: On Mon, 2022-11-14 at 07:50 +0800, jeremy ardley wrote: I decided to use systemd-networkd service and removed most of the stuff from /etc/network/interfaces [...] Thanks! I considered installing network manager, but the Debian wiki gave me the impression that

Re: how to add more ipv6 addresses to an interface that is being configured through dhcpv6

2022-11-13 Thread jeremy ardley
On 14/11/2022 7:50 am, jeremy ardley wrote: > How do I additionally assign fd53::40/16? I faced exactly the same problem on a recent new install of Debian 11. I decided to use systemd-networkd service and removed most of the stuff from /etc/network/interfaces This is my /etc/syst

Re: how to add more ipv6 addresses to an interface that is being configured through dhcpv6

2022-11-13 Thread jeremy ardley
On 14/11/2022 12:07 am, hw wrote: > Hi, > > the subject says it ... I have an interface that is being configured > with IPv4 and IPv6 addresses via dhcp. I need to assign an > additional IPv6 address to the interface. > > > > How do I additionally assign fd53::40/16? I faced exactly the sam

Re: afio batch operation

2022-11-06 Thread jeremy ardley
First, Thank you Thomas for taking the effort to document this. It has helped immensely. I fixed one typo in your script noted below and then it all worked flawlessly - though remarkably slow even on my PCIe NVME drive. I also made a mistake, it was two DVDs not a CD so quite a few gigabytes.

afio batch operation

2022-11-06 Thread jeremy ardley
I have a CD that was written by mondorescue and it has hundreds of files in the form .afio.bz2. I can open individual files using Xarchiver and see they are individually parts of an old system of mine. Can someone suggest a simple command line to extract the hundreds of files and write/merg

Re: debian/rules @variable@ syntax

2022-11-01 Thread jeremy ardley
On 1/11/22 22:20, The Wanderer wrote: This definitely isn't cmake. It's part of the Debian build system, and if that depended on cmake, I'm all but absolutely certain that I'd know it by now. Also, this has nothing to do with the build system for the software being packaged; it's entirely to d

Re: debian/rules @variable@ syntax

2022-11-01 Thread jeremy ardley
On 1/11/22 22:11, jeremy ardley wrote: Search for some CMakeFiles.txt files to check if you need to explore cmake further. Wrong. My typing error. Look for CMakeLists.txt files. -- Jeremy

Re: debian/rules @variable@ syntax

2022-11-01 Thread jeremy ardley
On 1/11/22 21:59, The Wanderer wrote: However, in doing so I have run into a snag which I previously skipped over and ignored: I don't actually know what the @variable@ syntax means/does, or what parses it. It's not Makefile syntax, as far as I've been able to determine. I haven't thus far found

Remove Network Manager panel icon in Mate 1.24.1 Desktop

2022-10-25 Thread jeremy ardley
I've recent had to do a fresh GUI install of Debian GNU/Linux 11 (bullseye) and I enabled Mate 1.24.1 I let the install run with the default Network Manager installation but very rapidly ran into the usual litany of bugs in making minor tweaks to the network (it is not a good sign if the gener

Re: Cheap NAS

2022-10-16 Thread Jeremy Ardley
On 17/10/22 9:32 am, Stefan Monnier wrote: pa...@quillandmouse.com [2022-10-16 14:22:16] wrote: Pi's don't have SATA. Depends on the flavor. Banana Pi and Orange Pi mini definitely do. [ But not a very good one, admittedly. And their power infrastructure tends to be overwhelmed when you c

Re: ssh -X authentication with sudo

2022-10-04 Thread Jeremy Ardley
On 4/10/22 8:52 pm, debian-u...@howorth.org.uk wrote: To use the display without ssh root login. ssh as normal user to host. Then echo $DISPLAY su - export DISPLAY=localhost:10 (or whatever your logged in user DISPLAY is set to) xauth add $(xauth -f ~/.Xauthority list | tail -1) xhost Tha

Re: ssh -X authentication with sudo

2022-10-04 Thread Jeremy Ardley
On 4/10/22 7:39 pm, Greg Wooledge wrote: Change the sshd_config to allow direct root logins. Then do ssh -X r...@debian.box. If you're the paranoid type, or if the Debian system is exposed to the public Internet, then make sure you only permit root logins when using pubkey authentication, not p

Re: OT: Is postfix "easier" than exim4? (was: Re: Which MTA for from-based smarthost selection, local delivery and queuing?)

2022-09-08 Thread Jeremy Ardley
On 8/9/22 7:10 pm, rhkra...@gmail.com wrote: To people who have familiarity with both postfix and exim4, is postfix really easier (in a variety of senses) than exim4? LIke to install, setup, and use? I tried to set up postix back near the beginning of my Linux odyssey, maybe sometime between

Re: Which MTA for from-based smarthost selection, local delivery and queuing?

2022-09-07 Thread Jeremy Ardley
On 8/9/22 12:29 pm, to...@tuxteam.de wrote: On Wed, Sep 07, 2022 at 10:31:37PM +0200, Sébastien Hinderer wrote: Dear all, (I am not subscribed to the list) Currently I am using exim4 as mail transport agent (MTA). I am looking for another one, because I would like to be able to configure the

Re: Network bridge and MAC address exposure

2022-09-04 Thread Jeremy Ardley
On 4/9/22 2:39 pm, Rand Pritelrohm wrote: 1. Bridge using routed subnet: ip link add dev br0 type bridge ip addr add 192.168.222.1/24 dev br0 ip link set dev br0 up ip tuntap add tap0 mode tap ip link set dev tap0 up ip link set dev tap0 master br0 #Then I h

Re: networking.service: start operation timed out [SOLVED]

2022-08-31 Thread Jeremy Ardley
On 31/8/22 10:45 pm, Chuck Zmudzinski wrote: I don't use haproxy but I see there is a package for it in the Debian repos. I think what you are seeing should be reported as a bug in haproxy if you are using the Debian packaged version. The haproxy package should start haproxy at the appropriate

Re: networking.service: start operation timed out [SOLVED]

2022-08-31 Thread Jeremy Ardley
On 31/8/22 9:16 pm, Anssi Saari wrote: I wonder what bugs Jeremy has found and reported against systemd-resolved though. I remember getting a big headache trying to get interface specific DNS configuration going only to eventually find out it really wasn't working in the version Debian packaged

Re: libdbi-perl broken?

2022-08-30 Thread Jeremy Ardley
On 31/8/22 11:11 am, Greg Wooledge wrote: apt-cache policy libdbi-perl perlapi-5.28.1 On Debian 11, libdbi-perl should depend on perlapi-5.32.0 not perlapi-5.28.1 so I suspect you've got the wrong libdbi-perl somehow. It would also help if you showed the full error message, instead of only a

libdbi-perl broken?

2022-08-30 Thread Jeremy Ardley
I am install a VM for a LEMP server using the latest ISO debian-11.4.0-amd64-DVD-1.iso The problem is installing mariadb (after installing nginx and php-fpm and doing apt update and apt upgrade) sudo apt install default-mysql-server ... The following packages have unmet dependencies:  libdb

Re: networking.service: start operation timed out [SOLVED]

2022-08-30 Thread Jeremy Ardley
On 30/8/22 9:56 am, Ross Boylan wrote: Now everything just works. Thanks again to everyone. There are probably some general lessons, though I'm not sure what they are. Clearly the systemd semantics tripped me up; it's kind of an odd beast. I understand one of its major goals was to allow st

Re: chromium: "Your browser is managed"

2022-08-30 Thread Jeremy Ardley
On 31/8/22 7:36 am, Jon Leonard wrote: On Tue, Aug 30, 2022 at 04:27:09PM -0700, L L wrote: I'm on bullseye, and installed chromium from the bullseye repos. In Chromium I get the message that the browser is "managed by your organization." I didn't do any special setup for work or school. Is the

Re: networking.service: start operation timed out

2022-08-27 Thread Jeremy Ardley
On 27/8/22 8:25 pm, to...@tuxteam.de wrote: On Sat, Aug 27, 2022 at 11:55:44AM -, Curt wrote: On 2022-08-27, Jeremy Ardley wrote: I'd appreciate any suggestions about how to diagnose or cure the problem. I have set VERBOSE=yes in /etc/default/networking First of all e

Re: networking.service: start operation timed out

2022-08-27 Thread Jeremy Ardley
On 27/8/22 7:55 pm, Curt wrote: On 2022-08-27, Jeremy Ardley wrote: I'd appreciate any suggestions about how to diagnose or cure the problem. I have set VERBOSE=yes in /etc/default/networking First of all ensure NetworkManager is really dead. Your advice and the advice of Andre

<    1   2   3   4   5   >